Report Overview
Visitedpublic
2026-02-28 20:18:16
Tags
Submit Tags
URL
0xbull.xyz/usdc/?claim.circle.com
Finishing URL
0xbull.xyz/usdc/?claim.circle.com
IP / ASN
104.21.22.38
Title
$USDC Token Airdrop
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
embed.tawk.to | 52083 | unknown | 2014-03-19 | 2026-02-23 | 4.1 kB | 680 kB | 104.20.42.169 |  |
va.tawk.to | 51316 | unknown | 2017-01-30 | 2026-02-23 | 1.5 kB | 5.2 kB | 104.20.42.169 | |
eoe1u9eng3oo7bi.m.pipedream.net | unknown | 2015-11-25 | 2025-08-21 | 2026-02-22 | 483 B | 258 B |  100.50.130.208 | |
userstatics.com | 262534 | 2020-11-05 | 2020-11-05 | 2026-02-27 | 463 B | 527 B | 195.177.94.253 |    |
0xbull.xyz 26 alert(s) on this Host | unknown | 2026-02-23 | 2026-02-28 | 2026-02-28 | 12 kB | 8.9 MB | 188.114.97.1 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.PHP:8.2.1 (Programming languages)
PHP is a general-purpose scripting language used for web development.Nginx:1.24.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 100.50.130.208 | ET INFO Webhook/HTTP Request Inspection Service Domain (m .pipedream .net in TLS SNI) | |
| low | Client IP | 100.50.130.208 | ET INFO Webhook/HTTP Request Inspection Service Domain (m .pipedream .net in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | 0xbull.xyz | malicious | Sinkholed |
JavaScript (16)
No JavaScripts
HTTP Transactions (40)
| URL | IP | Response | Size |
|---|